fix(agent): make ws callbacks no-cors

ulixee · Oct 27, 2024 · 898d6b2 · 898d6b2
1 parent 544edc8
commit 898d6b2
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/agent/main/lib/WebsocketSession.ts b/agent/main/lib/WebsocketSession.ts
@@ -167,8 +167,11 @@ function injectedScript(): void {
   const url = `${this.host}:${this.port}?secret=${this.secret}&clientId=${clientId}`;
   // This will signal to network manager we are trying to make websocket connection
   // This is needed later to map clientId to frameId
-  // eslint-disable-next-line no-console
-  fetch(`http://${url}`).catch(error => console.log(error));
+  fetch(`http://${url}`, {
+    mode: 'no-cors',
+  })
+    // eslint-disable-next-line no-console
+    .catch(error => console.log(error));
   let callback: WebsocketCallback;
   try {
     const socket = new WebSocket(`ws://${url}`);

diff --git a/timetravel/lib/MirrorNetwork.ts b/timetravel/lib/MirrorNetwork.ts
@@ -67,7 +67,8 @@ export default class MirrorNetwork {
         responseCode: 200,
         responseHeaders: [
           { name: 'Content-Type', value: 'text/html; charset=utf-8' },
-          { name: 'Content-Security-Policy', value: "script-src 'nonce-hero-timetravel'" },
+          { name: 'Content-Security-Policy', value: "script-src 'nonce-hero-timetravel'; connect-src 'self' ws://websocket.localhost:* http://websocket.localhost:*" },
+          { name: 'Access-Control-Allow-Origin', value: '*' },
         ],
         body: Buffer.from(`${doctype}<html><head></head><body></body></html>`).toString('base64'),
       };